Privacy Policy

Last updated: November 2025

About This Policy

Thrive United Physio is committed to protecting your privacy and the personal information you provide to us. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the Australian Privacy Principles and the Privacy Act 1988 (Cth).

As a healthcare provider working with NDIS participants, we take our privacy obligations seriously and handle all personal and sensitive information with care and respect.

Information We Collect

We may collect the following types of personal information:

  • Contact details: Name, address, phone number, email address
  • NDIS information: NDIS number, funding type, plan details
  • Health information: Medical history, diagnoses, treatment records, physiotherapy notes
  • Support network details: Family member or support coordinator contact information
  • Service records: Appointment history, progress notes, goals, and outcomes

How We Collect Information

We collect personal information:

  • Directly from you or your authorised representative when you complete our referral form or contact us
  • From your support coordinator, plan manager, or family member with your consent
  • From other healthcare providers involved in your care (with your consent)
  • Through our website when you submit enquiries or referrals

How We Use Your Information

We use your personal information to:

  • Provide physiotherapy services and coordinate your care
  • Communicate with you about appointments and treatment
  • Process NDIS claims and manage billing
  • Prepare reports for the NDIA, support coordinators, or other healthcare providers
  • Meet our legal and professional obligations
  • Improve our services and respond to feedback

Who We Share Information With

We may share your information with:

  • The National Disability Insurance Agency (NDIA) for claims and reporting
  • Your support coordinator or plan manager (with your consent)
  • Other healthcare providers involved in your care (with your consent)
  • Professional supervisors or mentors (in a de-identified format for quality assurance)
  • Government agencies when required by law

We will never sell or share your personal information for marketing purposes.

How We Protect Your Information

We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access. This includes:

  • Secure storage of physical and electronic records
  • Password protection and encryption for digital systems
  • Staff training on privacy and confidentiality
  • Regular review of our security practices

Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request corrections to inaccurate or outdated information
  • Ask how your information has been used or disclosed
  • Make a complaint if you believe your privacy has been breached

To exercise any of these rights, please contact us using the details below.

Retention of Information

We retain your personal and health information for as long as required by law and professional standards. For health records, this is generally a minimum of 7 years from your last appointment (or until you turn 25 if you were a child when treated).